XSS attacks

2.1. Write a website that is vulnerable to XSS attacks. Please upload your source code together with

this document onto Canvas and write down the filenames of your source code here.

2.2. What type of XSS attack have you written in the last question?

2.3. Please give an example on how to perform XSS attacks to your website.

2.4. Is Same Origin Policy (SOP) able to defend against your XSS attack? Please justify your answer

(why or why not).

2.5. What can you propose to defend against your XSS attack? Please elaborate it in detail by using

your attack.